[Samba] Samba 4 / idmap / NIS / winbind

[steve]

On Sat, 2014-06-07 at 20:31 +0000, Vogel, Sven wrote:

> nothing changed always /bin/false when i use getent passwd ...
> 
> 2. i tried the the Windows Remote Administration Tools and the Unix tab in Windows
> 
> I added NIS Domain, UID, GID, home and login shell but also nothing changed... i got the following
> 
> # record 1
> dn: CN=testswi,OU=Benutzer,OU=SWI,DC=swi,DC=local
> objectClass: top
> objectClass: person
> objectClass: organizationalPerson
> objectClass: user
> cn: testswi
> givenName: testswi
> instanceType: 4
> whenCreated: 20140530142421.0Z
> displayName: testswi
> uSNCreated: 12359
> name: testswi
> objectGUID: d6ebbae7-8ec0-4a89-828d-58c10a7c9f99
> userAccountControl: 66048
> codePage: 0
> countryCode: 0
> pwdLastSet: 130459334610000000
> primaryGroupID: 513
> objectSid: S-1-5-21-1143642306-2581635645-836595807-1605
> accountExpires: 9223372036854775807
> sAMAccountName: testswi
> sAMAccountType: 805306368
> userPrincipalName: testswi at swi.local
> objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=swi,DC=local
> loginShell: /bin/bash
> whenChanged: 20140607194437.0Z
> uSNChanged: 14355
> unixUserPassword: ABCD!efgh12345$67890
> uid: testswi
> msSFU30Name: testswi
> msSFU30NisDomain: swi
> uidNumber: 10000
> gidNumber: 100
> unixHomeDirectory: /home/testswi
> distinguishedName: CN=testswi,OU=Benutzer,OU=SWI,DC=swi,DC=local
> 
> when i use getent passwd testswi i always get the same as above. /bin/false
> 
> Questions.
> 
> Is that a problem from winbind in samba 4 that not all thing will correctly set or supported? W
> 
> Where get getent passwd ... the information from? I know ist winbind but whats wrong?
> 
> I read about some user they use sssd or nlcd. Is that the solution for samba 4?
> 
> I am confused. Anyone who can explain that?

Hi
winbind will not extract the loginShell or the unixHomeDrirector from
AD. If you wish to do this on the DC, you must use nslcd, nss-ldap or
sssd.
HTH
Steve